Import ACL

odsmith
Kilo Explorer

‎09-27-2013 05:38 AM

I have multiple tables and fields I would like to set new ACL's on. I was wondering if there is a way to impot a csv file with all of the acl information rather than doing it one at a time?

Regards,
odsmith

0 Helpfuls
  • 1,485 Views
2 REPLIES 2

PeterWiles
Kilo Sage

‎09-27-2013 06:30 AM

Technically, I can't see why not. The ACLs are on the "sys_db_object" and "sys_security_acl" table.

If you can actually do a data transform to this, would hazard a guess and say not since, to me anyway, it would be easy to break things and break the instance since the ACLs are the lowest level of security.
May want to pass it through HI and see what they say.


0 Helpfuls

Jacob_Andersen
ServiceNow Employee
ServiceNow Employee

‎10-07-2013 06:34 AM

You can import ACLs from a CSV file just like you can import into any other file. You may need to have two separate transform maps for the same import set table, though, if you're planning on making some ACLs role-based.

I'd like to see your reasoning for doing this, however. If it is to lock down the tables in your system, I think this is the wrong way to do this. Instead, you should implement a default-deny ACL that locks down EVERY table. Then, you can explicitly open the tables that should have access granted. You'll see the the NOW oob tables have been opened already for the appropriate roles.

http://wiki.servicenow.com/index.php?title=High_Security_Settings#Default_Deny_Property


0 Helpfuls